The Voleon Group: Quantitative investment management firm using machine learning strategies.
8+ YOEEight+ years in identity and access management, security or infrastructure with hybrid on-prem and cloud experience; strong IAM architecture, zero-trust, PAM, and leadership potential.
Tata Consultancy ServicesNational Stock Exchange of India: TCS: Global provider of IT services, consulting, and business solutions.
8+ YOE8+ years IAM experience with Saviynt IGA, identity governance, provisioning, access certification, SAML/OAuth/OIDC, API integrations, scripting (SQL/PowerShell/Python), and cloud app integrations.
CLEARNYSE: YOU: Secure biometric identity platform for travel and venue access
8+ YOE8+ years in IAM/security engineering with deep Okta and SailPoint experience, strong AWS access security, scripting (Python/Bash), Terraform, and API automation skills.
Okta, SailPoint, Terraform, Python, Bash, REST APIs, AWS, AWS IAM Identity Center
San Francisco or New York City or Chicago or United States
$150k-$210k/yrHybridFull Time
Komodo Health: Provides AI-driven healthcare data and patient journey analytics software.
5+ YOE5+ years IAM experience with Okta, identity lifecycle, SSO/MFA/federation, scripting for automation, APIs, Terraform/Github, and cross-functional partnership; strong security and governance background.
Guardian Life: Provides life, disability, dental, and vision insurance products.
5+ YOEBachelor's in CS/IT, 5+ years IAM engineering experience, expertise with Okta, PingFederate, SailPoint, CyberArk, Microsoft Azure AD/Entra ID, reverse proxies, audits, scripting, DevOps/CI/CD and AWS; CISSP/CISM preferred.
Okta, PingFederate, SailPoint, CyberArk, Microsoft Azure AD, Microsoft Entra ID, Okta Access Gateway, Microsoft App Proxy, DevOps, CI/CD, AWS
Fort Mill or Charlotte or New York City or San Diego or Austin or Tempe
$153k-$256k/yrOnsiteFull Time
LPL FinancialNASDAQ: LPLA: Provides wealth management and brokerage services to financial advisors.
10+ YOE10+ years in IAM or security architecture, 2+ years building IAM POCs and troubleshooting OAuth 2.0/OIDC flows, experience with PingOne AIC and/or Microsoft Entra ID, strong knowledge of SAML, OAuth/OIDC, JWT, and API authorization.
CVS HealthNYSE: CVS: Provides retail pharmacy, health insurance, and pharmacy benefit management services.
7+ YOE7+ years IAM experience with Active Directory, Entra ID and cloud IAM; support audits (HIPAA, SOX); PAM and automation experience; strong problem solving and stakeholder support skills.
Active Directory, Entra ID, GCP IAM, GCP Config Connector, Security Command Center, CyberArk, HashiCorp Vault
New York Life Insurance: Providing life insurance, annuities, and long-term investment solutions.
10+ YOEBachelor's degree or equivalent, 10+ years IAM engineering across IGA, PAM, Directory, and WAM; experience with SailPoint, CyberArk, Ping, Entra, Active Directory; scripting (PowerShell, Python, Java); familiarity with identity protocols and cloud integration.
Amex GBTNYSE: GBTG: Provides travel management services and technology for businesses.
5+ YOEBachelor's in Computer Science or related plus 5 years IAM experience; 4+ years Okta, SSO, SAML/OIDC/OAuth, OAG, and migrating legacy auth; strong communication and technical troubleshooting skills.
Johnston or Medford or Boston or Pittsburgh or Philadelphia or Melville or Short Hills or Marlton or Glen Allen or Cleveland or Cincinnati
$100k-$150k/yrRemoteFull Time
Citizens Financial GroupNYSE: CFG: Provides retail, commercial, and private banking services to customers.
5+ YOE5+ years in system security/IAM with experience in Azure/AWS identity solutions, password vaulting, privileged identity management, OS and database administration; BA/BS or equivalent experience required.
Azure Active Directory, AWS Directory Services, Active Directory, LDAP, Microsoft SQL, Oracle
Dublin or London or Reston or Charlotte or Parsippany
OnsiteFull Time
AIG: Global provider of property casualty insurance and risk solutions.
Define and govern enterprise IAM/CIAM strategy and target-state architecture; develop roadmaps; collaborate with PMO and engineering; knowledge of Entra ID, Okta, SailPoint IIQ, HYPR; strong stakeholder management.
Entra ID, Active Directory, Okta, SailPoint IIQ, HYPR, Intune, Windows Hello for Business
DTCC: Provides post-trade infrastructure for the global financial services industry
6+ YOE6+ years related experience; 2+ years hands-on PAM/IAM experience; bachelor's preferred; security/audit certifications (CISSP, CISM, CISA) a plus; experience with identity governance and stakeholder engagement.
Principal Authentication Engineer (IAM) — Vice President
New York, New York, United States
$150k-$210k/yrOnsiteFull Time
Morgan StanleyNYSE: MS: Global financial services firm providing investment and wealth management.
10+ YOEHands-on IAM engineering experience with OIDC/OAuth2, SAML, FIDO2/WebAuthn, PKI, API auth, IAM platform integrations, automation, and operating large-scale, highly available environments.
BBVABolsas y Mercados Españoles: BBVA: Provides global banking, insurance, and investment management services.
7+ YOE3+ MgmtLead IAM and physical security programs; 7+ years; 3+ years multi-site US leadership; IAM, PAM, SSO, MFA; security governance; regulatory and vendor coordination.
2+ YOE2+ years IT experience with 2+ years in Identity Management; lifecycle provisioning, MFA, PIM/PAM knowledge; scripting (PowerShell/Python/JavaScript); experience with servers, cloud apps, and infrastructure.
Microsoft Azure AD, Microsoft Active Directory, Microsoft AD Connect, Microsoft Azure Automation, Microsoft Power Automate, PowerShell, Python, JavaScript, Java, SAML, OpenID, WS-Fed, SSO, SCIM, OAuth, RESTful APIs, MSSQL, OGNL, GraphQL, Workday, SailPoint, Okta, Ping Federate, PingID, Splunk, RBAC
Identity & Access Management (IAM) Technology Lead
Boston or Jersey City
$130k-$190k/yrOnsiteFull Time
Brown Brothers Harriman: Providing global investment management, custody, and private banking services.
10+ YOE3+ Mgmt10+ years in IAM with 3–5 years leadership; hands-on SailPoint IdentityIQ; Java development background; identity lifecycle, RBAC, access governance, enterprise system integrations, program and project management, and people leadership.
Constructive Partnerships Unlimited: Providing residential and healthcare services to people with developmental disabilities.
3+ YOE3–5 years supporting identity and access management, Microsoft 365, Intune, Azure, and IT/security operations; experience with Entra ID, user lifecycle, endpoint management, and security monitoring; PowerShell or automation experience preferred.
Microsoft Entra ID, Microsoft 365, Exchange Online, SharePoint Online, OneDrive, Teams, Teams Phone, Microsoft Purview, Microsoft Intune, BitLocker, Defender for Endpoint, Defender for Office 365, Defender for Identity, Defender for Cloud Apps, Azure, PowerShell, Microsoft Graph, Logic Apps, SIEM, Microsoft Copilot, SAML, OAuth, OIDC